CVE-2026-98432 TCP bug RCE CVSS 9.8

AnthonySmithAnthonySmith AdministratorProviderOG
in Security

https://thehackernews.com/2026/10/linux-kernel-tcp-flaw-with-98-cvss.html?m=1

All distributions impacted. Ubuntu as always.... We will get there...... eventually

Seems if you run anything web facing built on GO you are much more vulnerable as multi path (not required for exploit) is much more vulnerable.

TierHive - Hourly VPS - NAT Native - /24 per customer - DE, UK, SG, CA x2, USA x5, FR x3, AU, PL, NL, JP, BR, ZA
FREE tokens on sign up, try before you buy. | Static Hosting Free for life: https://tierhive.com/static-hosting/

Comments

  • tulipyuntulipyun

    The uptime for all VPS instances has been successfully reset.

    B)

  • yoursunnyyoursunny OG
    edited 9:28AM

    The flaw is a race condition in the code that sets up new IPv4 TCP connections.

    We disabled IPv4 long ago except on VirMach.
    VirMach hasn’t performed the Pwnscape reboot, so it can’t get worse.

    The last flan is taken. 🍮 affbrr

  • lapualapua

    debian already fixed it!

  • xorxor

    I obviously have another round of updates to do now!

Sign In or Register to comment.